Static task
static1
Behavioral task
behavioral1
Sample
cd70a4d022dec879efc99630ee43f4a2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cd70a4d022dec879efc99630ee43f4a2.exe
Resource
win10v2004-20240226-en
General
-
Target
cd70a4d022dec879efc99630ee43f4a2
-
Size
421KB
-
MD5
cd70a4d022dec879efc99630ee43f4a2
-
SHA1
6e8530a8a71412858762c0a669efe14d9a38d489
-
SHA256
6c918172648fd2b6f1cd03142a66706bafb15a397cc804de6b67474575b62e31
-
SHA512
349f03d09a5940f5bf7306539bc9bf404064f9661987263a79eaee5cbf3629b1a8cff944f39c05a8a7575943f9e79c9ab4efc4dace4cdf8561d423fcc4324637
-
SSDEEP
12288:tSLJ9qT13B6BFhgexc5+Q8WB196FmfObKF44AHJ:ULJnhgejOB196AjFBAp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd70a4d022dec879efc99630ee43f4a2
Files
-
cd70a4d022dec879efc99630ee43f4a2.exe windows:4 windows x86 arch:x86
119ba01abad812c4a461368344bcd6cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlZeroMemory
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.pepsi Size: 414KB - Virtual size: 468KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE